SCIM (System for Cross-domain Identity Management)
SCIM is an open standard protocol for automating the exchange of user identity information between identity domains and IT systems. It enables organizations to automatically create, update, and deactivate user accounts across SaaS applications when employees join, change roles, or leave.
Why It Matters
SCIM solved the provisioning problem for human identities. Before SCIM, IT teams manually created and removed user accounts in every SaaS application. With SCIM, the identity provider automatically propagates changes to connected apps.
SCIM's adoption curve is instructive for agent governance. The standard was published in 2015, but meaningful ISV adoption took years. Even in 2026, many SaaS apps still do not support SCIM. This same vendor-dependency problem applies to XAA: the protocol exists, but enforcement requires ISV cooperation.
For agent governance, SCIM is relevant as the mechanism that keeps the human identity directory current. Agent permissions derive from the delegating human's access envelope, so accurate SCIM-based provisioning of human accounts is a prerequisite for accurate agent access scoping.